chore: comment out sops stuff - for now

hosts/common/network.nix

@@ -1,21 +1,38 @@
 { pkgs, ... }:
 {
+  environment.systemPackages = [ pkgs.opensnitch-ui ];
   networking = {
     networkmanager.enable = true;
 
     firewall = {
       enable = true;
       allowPing = true;
-      allowedTCPPorts = [ 2375 4780 11470 25565 ];
-      allowedUDPPorts = [ 3478 41641 8888 8899 ];
+      allowedTCPPorts = [
+        2375
+        4780
+        11470
+        25565
+      ];
+      allowedUDPPorts = [
+        3478
+        41641
+        8888
+        8899
+      ];
     };
   };
 
   services = {
+    opensnitch = {
+      enable = true;
+    };
     tailscale = {
       enable = true;
       useRoutingFeatures = "client";
-      extraUpFlags = [ "--accept-dns=false" "--reset" ];
+      extraUpFlags = [
+        "--accept-dns=false"
+        "--reset"
+      ];
     };
     openssh.enable = true;
     # openssh.settings.X11Forwarding = true;
@@ -58,7 +75,10 @@
     services.docker.serviceConfig = {
       StandardOutput = "journal";
       StandardError = "journal";
-      logFilterPatterns = [ ".*skip loading plugin.*" "skip plugin" ];
+      logFilterPatterns = [
+        ".*skip loading plugin.*"
+        "skip plugin"
+      ];
     };
     tmpfiles.rules = [
       "d /usr/local/share/polkit-1 0755 root root -"